# \[bug-15073\]Perspective view editor won't open

**URL:** <https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601>\
**Category:** Ignition Early Access\
**Tags:** perspective\
**Created:** [February 25, 2020, 7:22pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601 "2020-02-25T19:22:31Z")\
**Posts on this page:** 18\
**Page:** 1

<div class="post-metadata">

**Author:** ![dpoduzov](https://avatars.discourse-cdn.com/v4/letter/d/f1d935/32.png) [@dpoduzov](https://forum.inductiveautomation.com/u/dpoduzov)\
**Post date:** [February 25, 2020, 7:22pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/1 "2020-02-25T19:22:31Z")

</div>

Hi, Guys

I’m trying to create the first view in a Perspective project. This is what I get

This site can’t be reached

 ![PerspectiveEditor](https://us1.discourse-cdn.com/inductiveautomation/original/2X/b/be4d5038e7aac21914757f34123d05282c7904a4.jpeg)

Ignition platfofrm 8.0.7 - Activated  
Perspective module 1.0.7 - Activated, Running

Please help

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [February 25, 2020, 9:10pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/2 "2020-02-25T21:10:08Z")

</div>

Note the very last line of the error:

`ERR_CERT_AUTHORITY_INVALID`

If you are going to use SSL and a self-signed certificate, you have to tell Chrome to trust it. Or not do that. /:

---

<div class="post-metadata">

**Author:** ![dpoduzov](https://avatars.discourse-cdn.com/v4/letter/d/f1d935/32.png) [@dpoduzov](https://forum.inductiveautomation.com/u/dpoduzov)\
**Post date:** [February 25, 2020, 10:12pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/3 "2020-02-25T22:12:29Z")

</div>

Thank you. I disabled SSL in WebServer for now. That helped

---

<div class="post-metadata">

**Author:** ![dpoduzov](https://avatars.discourse-cdn.com/v4/letter/d/f1d935/32.png) [@dpoduzov](https://forum.inductiveautomation.com/u/dpoduzov)\
**Post date:** [March 23, 2020, 4:11pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/4 "2020-03-23T16:11:53Z")

</div>

I had to enable SSL. The editor doesn’t work anymore.

I’m using self-signed Ignition certificate. I configured the gateway according to the manual. Design launcher has no issued fining the https:// gateway, the project opens fine. I imported the certificate to Chrome. Perspective session opens fine in Chrome.

But the editor doesn’t work.

How can I fix this?

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [March 23, 2020, 4:22pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/5 "2020-03-23T16:22:25Z")

</div>

The embedded web browser frame doesn’t use Java’s keystore - it uses the OSes. Since you’re using a self-signed certificate, you have to trust your certificate in the operating system’s trust store, at which point the embedded browser engine will recognize it.

This is an issue we’re aware of and plan to fix, but that’s the workaround for now.

---

<div class="post-metadata">

**Author:** ![dpoduzov](https://avatars.discourse-cdn.com/v4/letter/d/f1d935/32.png) [@dpoduzov](https://forum.inductiveautomation.com/u/dpoduzov)\
**Post date:** [March 26, 2020, 1:12pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/6 "2020-03-26T13:12:48Z")

</div>

Thank you.  
How do I trust the certificate in Windows?

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [March 26, 2020, 6:56pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/7 "2020-03-26T18:56:50Z")

</div>

Looks like there’s a built in cert management tool: [https://www.thewindowsclub.com/manage-trusted-root-certificates-windows](https://www.thewindowsclub.com/manage-trusted-root-certificates-windows)

---

<div class="post-metadata">

**Author:** ![jcoleman](https://avatars.discourse-cdn.com/v4/letter/j/6de8d8/32.png) [@jcoleman](https://forum.inductiveautomation.com/u/jcoleman)\
**Post date:** [July 22, 2020, 5:47pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/8 "2020-07-22T17:47:53Z")

</div>

The Windows solution works for our self-signed certificate. Designer can edit views.  
But am having trouble with designer running on OpenSuse 15.1 (and Ubuntu). The view editor will not open the perspective view for editing. says “ERR\_CERT\_INVALID”  
I’ve added the certificate to the /etc/ssl/certs/ directory (Suse) and performed sudo update-ca-certificates but with no success as to editing views in the designer.  
The cert I added was exported from the browser from our gateway designer-launchers page as a .crt file instead of a .pem file. Everything else in /etc/ssl/certs is a .pem file.  
Anyone else have success in Suse or Ubuntu?

---

<div class="post-metadata">

**Author:** ![tom1](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/tom1/32/21417_2.png) [@tom1](https://forum.inductiveautomation.com/u/tom1)\
**Post date:** [February 12, 2021, 11:09pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/9 "2021-02-12T23:09:26Z")

</div>

Has there been any update to this issue? Specifically on Linux?  
Just as @jcoleman did, I added my certificate to the OS certificate store. I’ve restarted Designer but I’m still getting the same error. I’ve confirmed with the `openssl` tool that a connection from my system works and the certificate is validated.

To elaborate on @jcoleman’s comments:

- `update-ca-certificates` should show that it added a certificate. Initially it did not for me. Once I renamed my certificate from `*.pem` to `*.crt`, it worked and showed “`1 added`”.
- I did not add my certificate directly to `/etc/ssl/certs/` but rather to `/usr/local/share/ca-certificates/` as it appears that is where `update-ca-certificates` looks.
- Once the certificate was added, I tested with the following:
  - `openssl s_client -connect <server url here>:443 -CApath /etc/ssl/certs`
  - You should see the “Verify return code” equal to 0 (ok) as opposed to 18 (self signed certificate)

@paul-griffith, do you have any ideas?

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [February 12, 2021, 11:16pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/10 "2021-02-12T23:16:26Z")

</div>

Does it show as trusted in Chromium? I don’t know the exact path Chromium (and therefore JxBrowser) use on Linux to build trust.  
Either way, I’ve bumped the internal ticket’s priority so we can see about fixing this first party.

---

<div class="post-metadata">

**Author:** ![tom1](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/tom1/32/21417_2.png) [@tom1](https://forum.inductiveautomation.com/u/tom1)\
**Post date:** [February 13, 2021, 12:45am UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/11 "2021-02-13T00:45:36Z")

</div>

Chrome does not work either. I thought it was using it’s own cert store but that is not true (yet). So this helped me find that it uses a different store as described here: [https://chromium.googlesource.com/chromium/src.git/+/master/docs/linux/cert\_management.md](https://chromium.googlesource.com/chromium/src.git/+/master/docs/linux/cert_management.md)  
After adding the cert to the NSS DB, I now get a new error, `ERR_CERT_COMMON_NAME_INVALID`.  
The CN value and my server name match exactly so I don’t know what is wrong here. I’ll keep looking but I’m curious if other have luck with this process and their certs.

I tested the certificate in Firefox and it complains because the certificate CA is the same server.

I’m trying to confirm that the certificate, generated from the Ignition configuration interface, will work in any case. I can use Designer when running on the server that hosts the Ignition Gateway. I can launch a project in a browser by ignoring the certificate warnings. I cannot however get the iOS app to trust the certificate. The profile is installed and the certificate is trusted. The app keeps saying the certificate must be installed even after forcing it closed and restarting.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [February 14, 2021, 5:54pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/12 "2021-02-14T17:54:19Z")

</div>

Does your self-signed certificate have a SAN with a DNS entry that matches the server’s FQDN?

---

<div class="post-metadata">

**Author:** ![tom1](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/tom1/32/21417_2.png) [@tom1](https://forum.inductiveautomation.com/u/tom1)\
**Post date:** [February 14, 2021, 8:43pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/13 "2021-02-14T20:43:00Z")

</div>

@Kevin.Herron, that was indeed the issue. I believe everything is working now on Linux and iOS.

To recap for Linux users:

- When generating the self-signed certificate in Ignition, under “Subject Alternative Names” enter your DNS name. **Click “Add”** or the name will not be part of the certificate.
  - This appears to be necessary for all versions of Designer and the iOS app.

- Use Chrome to navigate from the Linux workstation to the Ignition Gateway and export the certificate it presents.
  - You can do this other ways as [described here](https://chromium.googlesource.com/chromium/src.git/+/master/docs/linux/cert_management.md).

- Use Chrome’s certificate manager (at chrome://settings/certificates) to import the certificate under “Authorities”.
  - Again there are other ways to do this.
  - The common trusted CA list at `/etc/ssl/certs/ca-certificates.crt` is not applicable here.

---

<div class="post-metadata">

**Author:** ![FrankP](https://avatars.discourse-cdn.com/v4/letter/f/34f0e0/32.png) [@FrankP](https://forum.inductiveautomation.com/u/FrankP)\
**Post date:** [March 3, 2023, 10:59pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/15 "2023-03-03T22:59:50Z")

</div>

8.1.24, still not fixed? Is there a workaround?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [March 3, 2023, 11:07pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/16 "2023-03-03T23:07:07Z")

</div>

What's not fixed? The last issue discussed here was a problem with the certificate missing a SAN entry.

---

<div class="post-metadata">

**Author:** ![FrankP](https://avatars.discourse-cdn.com/v4/letter/f/34f0e0/32.png) [@FrankP](https://forum.inductiveautomation.com/u/FrankP)\
**Post date:** [March 7, 2023, 12:36pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/17 "2023-03-07T12:36:13Z")

</div>

I'm having trouble getting the Perspective Designer pages to load with self-signed cert. Importing into Window's keystore doesn't seem to help either. Was hoping to find out if a simpler fix has been made, like having the designer accept the cert if the designer client was set to trust it. Or a setting in the designer somewhere. Thanks for responding!

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [March 7, 2023, 2:06pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/18 "2023-03-07T14:06:00Z")

</div>

The original fix mentioned here was done, but if there's something wrong with the structure of your certificate like the previous post then it still won't work.

Can you upload it here so we can take a look?

---

<div class="post-metadata">

**Author:** ![FrankP](https://avatars.discourse-cdn.com/v4/letter/f/34f0e0/32.png) [@FrankP](https://forum.inductiveautomation.com/u/FrankP)\
**Post date:** [March 7, 2023, 2:46pm UTC](https://forum.inductiveautomation.com/t/bug-15073-perspective-view-editor-wont-open/32601/19 "2023-03-07T14:46:57Z")

</div>

Kevin,

Thank's for hinting I should look harder and offering to help... I realized the issue was the missing SAN (Subject Alt Name). I had incorrectly assumed the CN (Common Name) matching the hostname would be sufficient. Re-creating it with CN set to the hostname AND adding a SAN for each the IP and the hostname fixed this.
